Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
255361 8.5 危険 PostgreSQL.org
サイバートラスト株式会社
レッドハット
ターボリナックス
オラクル
- PostgreSQL における任意の Perl コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-1169 2010-12-15 12:31 2010-05-17 Show GitHub Exploit DB Packet Storm
255362 6.5 警告 Openswan
レッドハット
- Openswan のクライアント内にある programs/pluto/xauth.c における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2010-3753 2010-12-14 14:24 2010-09-27 Show GitHub Exploit DB Packet Storm
255363 6.5 警告 Openswan
レッドハット
- Openswan のクライアント内にある programs/pluto/xauth.c における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2010-3752 2010-12-14 14:22 2010-09-27 Show GitHub Exploit DB Packet Storm
255364 6.5 警告 Openswan
レッドハット
- Openswan のクライアント内にある programs/pluto/xauth.c におけるバッファオーバーフローの脆弱性 CWE-94
コード・インジェクション
CVE-2010-3308 2010-12-14 14:20 2010-09-27 Show GitHub Exploit DB Packet Storm
255365 6.5 警告 Openswan
レッドハット
- Openswan のクライアント内にある programs/pluto/xauth.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-3302 2010-12-14 14:15 2010-09-27 Show GitHub Exploit DB Packet Storm
255366 4.3 警告 freedesktop.org
レッドハット
- Poppler の PDF パーサ内にある poppler/Function.cc におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-3703 2010-12-13 16:04 2010-11-5 Show GitHub Exploit DB Packet Storm
255367 8.3 危険 Linux
レッドハット
- Linux kernel の sctp_auth_asoc_get_hmac 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-3705 2010-12-13 15:57 2010-10-20 Show GitHub Exploit DB Packet Storm
255368 6.6 警告 Linux
レッドハット
- Linux kernel の pkt_find_dev_from_minor 関数における整数符号エラーの脆弱性 CWE-189
数値処理の問題
CVE-2010-3437 2010-12-13 15:41 2010-10-4 Show GitHub Exploit DB Packet Storm
255369 7.2 危険 Linux
レッドハット
- x86_64 プラットフォーム上で稼動する Linux kernel の IA32 システムコールエミュレーション機能における権限昇格の脆弱性 CWE-DesignError
CVE-2010-3301 2010-12-13 15:29 2010-09-22 Show GitHub Exploit DB Packet Storm
255370 7.2 危険 Linux
レッドハット
- Linux kernel の niu_get_ethtool_tcam_all 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-3084 2010-12-10 15:24 2010-09-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4031 7.5 HIGH
Network
openmrs openmrs OpenMRS Core is an open source electronic medical record system platform. In versions 2.7.8 and earlier and versions 2.8.0 through 2.8.5, the `/openmrs/moduleResources/{moduleid}` endpoint is vulnera… CWE-22
Path Traversal
CVE-2026-40075 2026-05-13 01:18 2026-05-6 Show GitHub Exploit DB Packet Storm
4032 6.5 MEDIUM
Network
getgrav grav Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a low-privileged user (EX: Content Editor with only pages.update permissions) can bypass the existing Twig sandbox restrictions by utilizing … CWE-863
 Incorrect Authorization
CVE-2026-42610 2026-05-13 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
4033 8.9 HIGH
Network
getgrav grav Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a low-privileged (with the ability to create a page) user can cause XSS with the injection of svg element. The XSS can further be escalated t… CWE-79
Cross-site Scripting
CVE-2026-42611 2026-05-13 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
4034 5.4 MEDIUM
Network
getgrav grav Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a stored Cross-Site Scripting (XSS) vulnerability in getgrav/grav allows publisher-level accounts to execute arbitrary JavaScript. The issue … CWE-79
Cross-site Scripting
CVE-2026-42612 2026-05-13 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
4035 4.8 MEDIUM
Network
getgrav grav Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with page editing permissions can inject an executable JavaScript event-handler attribute into rendered image HTML thro… CWE-79
Cross-site Scripting
CVE-2026-42841 2026-05-13 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
4036 6.5 MEDIUM
Local
linuxcontainers lxc lxc is a Linux container runtime. In the setuid helper lxc-user-nic, the delete path contains a logic flaw in the find_line() function that allows an unprivileged user to delete OVS-attached network … CWE-863
 Incorrect Authorization
CVE-2026-39402 2026-05-13 01:12 2026-05-6 Show GitHub Exploit DB Packet Storm
4037 5.3 MEDIUM
Network
torchbox wagtail Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, the Documents and Images API incorrectly listed items in private collections. A user with access t… CWE-280
Improper Handling of Insufficient Permissions or Privileges 
CVE-2026-44201 2026-05-13 00:59 2026-05-12 Show GitHub Exploit DB Packet Storm
4038 6.5 MEDIUM
Network
torchbox wagtail Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user without the ability to edit a page could access revisions of the page through the revis… CWE-280
Improper Handling of Insufficient Permissions or Privileges 
CVE-2026-44197 2026-05-13 00:58 2026-05-12 Show GitHub Exploit DB Packet Storm
4039 4.3 MEDIUM
Network
torchbox wagtail Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user without the ability to edit a page could still access the history report for the page, … CWE-280
Improper Handling of Insufficient Permissions or Privileges 
CVE-2026-44198 2026-05-13 00:58 2026-05-12 Show GitHub Exploit DB Packet Storm
4040 6.5 MEDIUM
Network
torchbox wagtail Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user with limited access to form pages could delete submissions to form pages they don't hav… CWE-280
Improper Handling of Insufficient Permissions or Privileges 
CVE-2026-44199 2026-05-13 00:58 2026-05-12 Show GitHub Exploit DB Packet Storm